Flatpak

3 known vulnerabilities in Flatpak, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-96808 CVSS 7.4 high In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers…
CVE-2026-96807 CVSS 4.0 medium In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to…
CVE-2026-90616 CVSS 7.4 high In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be…